Detections
Analytics
Deterministic Network Extender 'dne2000.sys' Local Privilege Escalation
high Nessus Plugin ID 33480
Synopsis
The remote host contains a kernel driver that is affected by a local privilege escalation vulnerability.Description
A kernel driver from Deterministic Network Extender (DNE) is installed on the remote host. DNE is typically packaged with third-party applications and is reportedly included with :- SafeNet HighAssurance Remote and SoftRemote
- Cisco VPN Client
- Blue Coat Systems WinProxy
The installed version of 'dne2000.sys' is affected by a local privilege escalation issue. By sending a specially crafted IOCTL request, it may be possible to execute arbitrary code with kernel privileges.
Solution
Upgrade to dne2000.sys version 3.21.12.17902See Also
https://downloads.securityfocus.com/vulnerabilities/exploits/29772.c
Plugin Details
Severity: High
ID: 33480
File Name: dne_priv_escalation.nasl
Version: 1.15
Type: local
Agent: windows
Family: Windows
Published: 7/11/2008
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
Required KB Items: SMB/Registry/Enumerated
Exploit Available: true
Exploit Ease: Exploits are available
Reference Information
CVE: CVE-2008-5121
BID: 29772